SQL Injection in Yeswiki

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-43091 · ADVISORY
• yeswiki/yeswiki commit c9785f9 · WEB
• yeswiki/yeswiki · PACKAGE
• huntr.dev/bounties/07f245a7-ee9f-4b55-a0cc-13d5cb1be6e0 · WEB
• huntr.dev/bounties/07f245a7-ee9f-4b55-a0cc-13d5cb1be6e0 · Exploit

Mais vulnerabilidades de yeswiki/yeswiki

• CVE-2026-104473MÉDIO 6.1YesWiki before 4.5.3 contains multiple reflected cross-site scripting vulnerabilities that allow remote attackers to inject JavaScript throu…
• CVE-2026-52777CRÍTICO 9.4YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImport…
• CVE-2026-52775ALTO 8.8YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest development branch contains a SQL injection vuln…
• CVE-2026-52774MÉDIO 6.1YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attr…
• CVE-2026-52773MÉDIO 6.1YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archived-revision view reflects the time GET …